The package is minimal and clearly licensed, with organization backing and no install-time scripts. Its only release was about 4 years 11 months ago, and the repository has had no commits in roughly 4 years, limiting confidence in ongoing maintenance.
58%
Total Score
67
100
78
83
The package has only one release, published about 4 years 11 months ago, with no releases in the last 12 months. This is the strongest evidence of limited ongoing maintenance, although the package may be intentionally stable.
There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this indicates a prolonged maintenance gap rather than a merely quiet recent period.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a small stable package, but it also provides no evidence of active community maintenance.
The repository has 0 stars, 0 forks, and 1 watcher. This offers little evidence of external adoption, but popularity is supporting evidence only and does not independently determine package health.
The repository uses Composer for its build, which fits the package ecosystem. No security scanning tools are configured, a minor hygiene gap that does not outweigh the maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magento/framework Version * | — | — |
ghostunicorns/module-crt-base Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.